Geoffrey Shelton Okot Thanks for your answer. Unfortunately for me, it leads to more (inner) questions 😉 1) While the client/Kerberos dialogs are well-described with a non-encrypted secret key for the client (described in Wikipedia), I have not found yet a description explaining how parties agree to work together, when the client side has only an encrypted secret key in a keytab. 2) I don't see why things are improved after encrypting the secret key in a keytab. AFAIU one identity could be stolen when copying a keytab, and then, in that case, having, inside the keytab, a secret key, encrypted or not, does not look like to change anything related to keytab copy protection. Some things are still obscure for me. About (1) : do you have any link pointing to a protocol detail description when working with an encrypted secret key in a keytab ? Thanks again.
... View more
